Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5VXyzOIEAZWrRjcB1dTAd7xSoyM.roa
File:                     5VXyzOIEAZWrRjcB1dTAd7xSoyM.roa (raw, json)
Hash identifier:          +ZwdR8K28mPgzqY7fnEurmxPpok2BSf8d1PykUbq+gw=
Subject key identifier:   E5:55:F2:CC:E2:04:01:95:AB:46:37:01:D5:D4:C0:77:BC:52:A3:23
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       08148A97
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5VXyzOIEAZWrRjcB1dTAd7xSoyM.roa
Signing time:             Sat 01 Jan 2022 16:03:22 +0000
ROA not before:           Sat 01 Jan 2022 16:03:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211253
IP address blocks:        91.244.204.0/22 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135563927 (0x8148a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  1 16:03:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e555f2cce2040195ab463701d5d4c077bc52a323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:66:be:fc:75:18:06:09:f2:47:35:af:0a:
                    27:6a:ce:44:b7:35:33:b9:53:0c:48:8e:29:09:01:
                    5f:21:15:c8:0f:17:6d:26:b9:f8:d4:12:84:02:87:
                    32:a5:32:25:bc:3b:cd:7c:9e:90:8f:d6:75:1a:2a:
                    45:8b:4e:a9:73:f1:d0:9d:70:8e:a2:91:38:72:19:
                    a6:5a:9e:db:28:4d:c8:60:c8:5f:93:a3:41:08:fd:
                    19:81:b2:a7:7d:ce:00:e9:fd:ce:9e:cc:4b:68:43:
                    1b:c5:42:ed:62:36:5f:95:88:b3:22:1a:4a:a5:96:
                    e3:d2:38:7d:52:de:04:13:89:c0:79:e8:dd:22:31:
                    4a:6d:aa:ed:93:df:f7:24:69:de:c9:48:ae:02:40:
                    da:fb:23:46:26:8e:f1:6d:33:f5:ed:a8:5b:b4:ba:
                    4c:83:f4:f0:ea:cb:00:7d:cb:6a:0a:ae:ea:3c:8c:
                    4e:d5:39:90:cb:dc:5e:8d:0d:09:60:1b:e8:b2:bf:
                    7b:7d:bc:e9:f1:bd:5c:b9:80:ea:e7:f5:8e:79:05:
                    11:a1:43:ba:bb:9c:03:59:86:ef:db:19:91:1a:83:
                    3b:a0:6e:3c:7c:e3:95:a4:4c:4c:8c:0f:eb:4e:7e:
                    e3:5c:5a:b3:b0:f5:6c:2a:a7:33:e7:6d:23:b1:1e:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:F2:CC:E2:04:01:95:AB:46:37:01:D5:D4:C0:77:BC:52:A3:23
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5VXyzOIEAZWrRjcB1dTAd7xSoyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:3d:36:2a:f0:98:39:8a:80:e0:a3:a3:9a:91:b6:b1:ca:
         7b:c8:bd:f4:e9:fd:3e:bf:06:35:ec:2a:e3:f3:24:f9:84:b2:
         8a:66:03:5c:bb:b2:84:60:99:50:69:a3:8c:1d:6e:69:99:59:
         cf:d4:60:ab:a8:a5:b1:42:58:84:16:37:43:8f:91:a2:5c:e8:
         9a:fc:5e:09:8d:44:34:2e:db:d0:82:13:83:0a:21:e2:f9:74:
         91:b3:81:5e:01:62:ba:f3:a0:9c:d3:32:f5:33:ff:cf:2d:b1:
         4d:30:a5:17:72:06:ef:85:88:da:d0:41:5a:8b:5e:ac:29:9b:
         80:ef:1c:b2:d7:ec:32:b5:8a:56:22:4b:67:0f:98:97:a1:4b:
         4f:7d:95:3b:73:b6:25:17:fb:99:ea:02:b0:e7:60:4f:15:91:
         e9:41:d4:f7:ac:9d:71:1c:40:bd:cf:95:5e:ac:b2:67:35:1d:
         75:10:04:a4:b0:95:aa:e7:59:92:3a:9a:4d:51:34:39:53:1b:
         cb:3a:9e:e5:c7:b0:50:73:51:64:32:95:c5:f8:31:75:08:1f:
         5b:82:ea:69:5b:aa:b5:a8:00:af:b5:27:71:37:f5:50:d0:80:
         8e:12:17:08:69:ec:90:24:1c:9c:91:88:2f:8e:0a:bc:72:c8:
         19:52:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org